Design And Implementation Of State Encryption Card Driving System And Software Encryption Based On Multi-core Router

With the rapid development of computer network technology, the network security issues have become increasingly prominent. The security of network depends on the security of terminal equipment, forwarding equipment and transmission channel. As forwarding equipment, the router is an important node in network communication and plays a key role in information security. Therefore, implementing data encryption in forwarding equipment such as routers and switches has become an efficient way to guarantee the network information security and prevent network monitoring.According to the hardware architecture of the state encryption card and the architecture of the multi-core router, a driving system of high stability and efficiency is designed and implemented to support state encryption algorithm in the router. The encryption software which can be applied to the router is also designed and implemented.The main contributions of this thesis are as following:1. The thesis discusses the relevant techniques of the driving system, including Comware operating system, the software and hardware architecture of the router and the architecture of the state encryption card. According to the characteristics of the state encryption card, both centralized and distributed hardware schemes are designed.2. Based on the analysis of the system requirements, the driving system is designed. C language and GCC integrated development environment are used to implement a driving system which supports the state encryption card on the Comware operating system. The driving system mainly consists of veneer initialization module, CCF module, inter-board communication optimization module, Ethernet controller data sending and receiving module and encrypted authentication module. The designed CCF module provides a unified interface for Comware platform and the encryption module, hiding the differences among different encryption engines. The inter-board communication is optimized using confirm retransmission mechanism and serial number verification mechanism and thus it becomes much more stable, reliable and efficient.3. The functions of the developed software are debugged and tested. The problems encountered in the debugging process are analyzed and solved. And then the performance of the developed software is tested under circumstance of high speed traffic. The test results show that the developed software is able to meet the system requirements and design objectives.4. To solve the problem of the key management in DES algorithm on Comware system, a scheme combining DES and RSA algorithms is designed. And an operational database of large numbers is provided which can improve the computational efficiency. Based on the DES_RSA algorithm, the encryption software is implemented and tested. The tested results show the feasibility of applying the designed encryption software to the router.